EASY CHECK-OUT WITH ENHANCED SECURITY 



Prior Foreign Application 

This application claims priority from European patent 
application number 99126197.5, filed December 30, 1999, 
5 which is hereby incorporated herein by reference in its 
entirety. 

Technical Field 

This invention relates to a check-out system for 
supermarkets or department stores for accomplishing an easy 
10 check-out with enhanced security. 

This invention relates in particular to a contactless 
label chipcard including payment and identification 
information and a check-out system including a contactless 
reader for reading and updating payment status information 
15 stored in that label chipcard. 

Background Art 

In supermarkets or department stores consumers normally 
put articles selected to buy into a shopping cart, move the 
cart to a check-out station at which the articles have to be 
20 paid and put them onto a belt. The cashier scans each 

article separately by the use of a bar code reader and puts 
the article back on the belt. Then, the customer puts back 
the articles into his cart or into a bag. 
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In more advanced supermarkets customers are entitled to 
scan the barcode of the articles by themselves by a device 
embedded in the cart or by a hand held device. At the 
check-out station the cashier or the customer transfers the 
5 data from the device into the POS system and the invoice or 
bill is issued by the check-out system. Preventing frauds 
customers will be selected accidentally and controlled. This 
system is based on trusting in the customer. A disadvantage 
of that system is that frauds cannot not be excluded 
10 totally. 

Prior art systems which deal with contacts labels 
attached to articles or products mainly discusses anti theft 
systems. The operation of those antitheft systems with the 
single use label is based on two principles. One system 

15 utilizes an electromagnetic radio frequency (RF) field of a 
defined frequency and works with labels or tags which 
contains a tuned circuit consisting of a coil and capacitor. 
The other systems utilizes an electromagnetic RF field of a 
defined frequency and works with labels containing a strip 

20 of amorphous metal having specific properties . 

Few examples of those systems are disclosed in the 
following US patents: 

US 5 608 380 discloses a deactivation and coding system 
for contactless anti theft or identification label. This 
25 system uses a pyrotechnic material to burn away a track 

portion, whereby an electrical connection is severed. The 
labels in the system consist of tuned circuits in the form 
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of one or more coil/capacitor combinations. Deactivation can 
be effected by severing the connection between coil and the 
associated capacitor. 



US 5 103 210 discloses an activatable/deactivatable 
5 security tag for use with a electronic system for a 

controlled area. The tag comprises circuitry for initially 
establishing a resonant circuit having a first resonating 
frequency within a first frequency range which is outside 
the range of the detection frequency of the electronic 

10 security system. The tag is activated by changing the 

resonating frequency of the resonant circuit to a second 
frequency within the detection frequency range by exposing 
the resonant circuit to electromagnetic energy with the 
first frequency range at the predetermined minimum power 

15 level to short-circuit a first circuit component. The tag is 
deactivated by again changing the resonant frequency of the 
resonant circuit to a third resonant frequency within a 
third frequency range which is also outside of the detection 
frequency range exposing the resonant circuit to 

20 electromagnetic energy within the detection frequency range 
of at least a predetermined minimum power level to 
short-circuit a second component. 

US 5081445 discloses an electronic article surveillance 
(EAS) tags which are attached to articles of merchandise not 
25 at the stores using EAS equipment, but in conjunction with 
the manufacture of these articles. At that stage, the tags 
are detectable by the EAS equipment. They are made 
detectable upon receipt by an EAS using store. For swept 
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frequency RF EAS equipment, the tags are initially provided 
with two capacitors which make the tags resonant at a first 
frequency not detectable by the store's equipment- To 
activate them, one capacitor is disabled, thereby making the 
5 tags resonant at a different frequency which is detectable. 

A further use of label chipcards is disclosed in the 
press announcement of Philips 

(http: //www-US - semiconductors . com/news/content /file_381 . html) 
10 as follows: 

The world^s first large-scale trial to identify airline 
luggage, using disposable ''smart labels" to speed up luggage 
handling, reduce missing baggage and increase security, 
began this month. For the two month trial, British Airways 
15 has asked Philips Semiconductors to test its I •CODE smart 
label radio frequency identification (RFID) technology to 
identify 75,000 suitcases travelling with passengers from 
Munich, Germany and Manchester, UK to London's Heathrow 
airport . 

20 Each "smart bag tag" contains an integrated circuit 

(IC), that can be programmed with detailed information such 
as the date and time the luggage is checked in, the weight, 
as well as a unique identification number and the 
passenger' s destination. 

25 The I •CODE IC is so thin and small it can be placed 

between two layers of paper, inside the baggage tag 
currently used by airlines. The IC is attached to an 
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antenna^ which also lies inside the label, and communicates 
with the scanner by radio signals, from a distance of up to 
1.2 metres away. No battery is required inside the label as 
the I •CODE chip is powered by the radio signal from the 
5 scanner. 

With the present bar coded luggage tags, nearly half 
of baggage in transfer requires manual handling to route it 
to the correct aircraft. Smart labels have many advantages 

10 over bar coded alternatives as they use radio frequency to 
communicate and therefore do not require a direct ''line of 
sight". They can also be scanned from over one meter away. 
The technology allows several smart labels to be scanned 
simultaneously, speeding up the baggage handling process. In 

15 addition, the information on smart labels can be 

re-programmed, or added to, without the need to print and 
attach a new label. This means, for example, that new travel 
details can be easily added. 

British Airways is carrying out the field test on a 
20 non-competitive basis, inviting other major airlines to 
visit the installation. The results will be presented to 
lATA, the International Air Transport Association. 

All above mentioned anti theft systems have the 
disadvantage that the labels are exclusively used as a 
25 security labels for detecting not paid articles. The labels 
itself does not simplify the payment. Furthermore, the 
security labels having no sufficient protection against 
manipulation . 
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Sxiinmarv of the Invention 



It therefore object of the present invention to teach 
a method and system for simplifying the above mentioned 
systems and simultaneously improving their security. 

5 This object is reached by the features of the 

independent claims. Further advantageous embodiments of the 
present invention are laid down in the subclaims. 

According to this invention all articles offered in 
the store are labeled with a contactless label chipcard. In 

10 the memory of the label chipcard at least the label and 
product identification information (number) and payment 
status information (paid or unpaid) are stored. In a further 
embodiment of the present invention the chipcard stores 
additionally product price information as well an 

15 authentication key. For carry out that invention the 

check-out system requires an additional computer program 
which executes the communication between the label chipcard 
and the check-out system inclusively the payment. 

20 Passing the check-out system with the cart in which 

articles with attached label chipcards are placed a 
communication between contactless label chipcard and 
checkout system will be established. Preferably the 
communication is established over a radio field generated by 

25 a generator of the check-out system. Based on the 

information received from the label chipcard^ the check-out 
system generates the invoice or bill and the payment status 
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information for each article will be updated into PAID, 
Articles having the payment status not paid will be detected 
by a warning system which is part of the check-out system. 

5 The check-out system is positioned at such a point in 

the store that all articles can remain in the cart without 
putting them onto a belt. This simplifies essentially the 
buying in a store . 

Brief Description of the Drawings 

10 The present invention is described using a preferred 

embodiment with figures, where 

FIG 1 shows a standard chipcard which 
may be used in the present invention. 

FIG 2 shows a standard device for 
contactless communication between an 
accepting device (e.g. check-out system) and 
a contactless chipcard (e.g. label chipcard) . 

FIG 3 shows basic architecture of the 
present invention with optional payment 
20 services . 

FIG 4 shows a preferred embodiment of 
the communication protocol between label 
chipcard and check-out system. 
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FIG 5 shows a preferred method for 
contactless payment according to the present 
invention - 

Best Mode for Carrying Out the Invention 

5 FIG 1 shows a block diagram of a contactless chipcard. 

The chipcard includes a contactless interface^ antenna;, 
resistors^ diode^. clock generator & data receiver, voltage^, 
regulator, transmitter driver, microcontroller and 
nonvolatile memory. Such contactless chipcards are not 
10 thicker than available on the market. 

FIG 2 shows energy and clock transmission between 
accepting device which could be a part of a check-out system 
and a contactless chipcard which could be used as a label 
chipcard. 

15 To transfer data from the acceptance device to the 

contactless chipcard two methods are actually used: the 
capacitive and the inductive coupling. 

With the capacitive coupling small metal plates must 
be integrated in the acceptance device and the card. The 
20 plates provide a capacity of some 10 pF. This capacity is 
high enough for data transmission but to small for energy 
transmission . 

For data transmission two metal plates are used to 
allow a differential voltage method. 
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Each plate is charged in the opposite polarity. An 
inverting of the voltage is interpreted as a change of the 
logic state of the serial data stream. 

If the distance between the chipcard and the device is 
increased, the capacity decreases and the data transmission 
can be interrupted. Therefore the capacity coupling is only 
possible for an operating range of some mm, in addition, the 
card must be in a relative exact position within the 
accepting device. 

Allowing transmission over a larger distance the 
inductive coupling is used. Within this method an already 
existing RF-f requency, that is used for energy transmission, 
is used also for data transmission. Data transmission is 
accomplished by modulating the carrier signal by amplitude, 
frequency or phase. The close coupling cards use the phase 
shift key method and the remote fix coupling cards use the 
amplitude shift key method. 

To transfer the data from the chipcard to the 
20 accepting device also two methods are actually used: 

the capacitive coupling and the inductive coupling. The 
capacitive coupling is equivalent as used to transfer the 
data from the acceptance device to the card. 

To allow a data transmission over a large distance the 
25 inductive coupling is used. The mainly method is load 

modulation with use of a sub carrier frequency. The sub 
carrier frequency is generated by dividing the carrier 
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frequency of the accepting device on the card. A load 
modulation is performed by switching a load resistor in 
parallel to the coil (antenna) . In the state ''load on" 
resistor is intermediate switched on and off with the sub 
5 carrier frequency. The acceptance device measures the load 
changes and converts this changes to a serial data stream. 
The bit coding of the serial data stream is system dependent 
implemented. 

FIG 3 shows the basic architecture of the present 
10 invention with optional payment services. 

A significant component of the present invention is 
the inventive check-out system which preferably includes a 
contactless reader for reading information received from the 
contactless label chipcard which is attached to each 
15 article. A further embodiment of the check-out system 
includes a contactless reader as well as a reader for 
contact payment chipcards. The contact payment chipcard 
could be an electronic purse or a credit card. 

Another further embodiment of the check-out system 
20 includes additionally a reader for reading magnetic stripe 
cards. The check-out system accesses product data for 
calculating invoice or bill identified by the information 
received from the label chipcard. These product data or 
enterprise data are preferably available via an enterprise 
25 server having an enterprise data base. 
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A further embodiment of the present invention suggests 
the implementation of a system for determining payment 
possibilities for a customer based on the information 
received from chipcard, e.g. VISA card. My Loyalty Card, 
5 electronic purse which are inserted in a contact reader of 
the check-out system. In the case a contactless customer 
payment chipcard is offered by the store the customer 
chipcard preferably contains the label ID (e.g. label ID = 
My LoyaltyCard) , customer identification number (e.g. 0815), 
10 customer name (e.g. Mtiller) , authentication key (e.g. k2) 
and credit limit (e.g. 400 DM). 

In the case a contactless employee chipcard is used 
such a chipcard preferably contains the label ID (e.g IBM 
BADGE), employee identification number (e.g. 0816), employee 
15 name (e.g. Miiller) and the authentication key (e.g. k2) . 

Finally a contact chipcard like a magnetic stripe card 
preferably contains the label ID (e.g. VISA card), card 
number (0818) and expiry date (e.g. 01/100) . 



A contactless label chipcard usually communicates with 
20 the reader of the check-out system via radio frequencies 
using a specific protocol- In a contactless environment, 
several contactless chipcards can be present at the same 
time in an activation field. To communicate with a specific 
chipcard, the IFD subsystem uses an anticorrosion procedure. 
25 Each chipcard is identified and addressed using a specific 
ID. 
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The inventive check-out system preferably includes an 
interface device with the following components: 
a display, an input-device, e.g. keyboard, an output-device, 
e.g. a printer. 

5 Finally, the check-out system includes an anti theft 

alarm system for detecting articles which are not paid. 

The label chipcard which is attached on each article 
contains preferably following information: 
label ID 
10 product or article ID 

product or article status paid/unpaid 
authentication key. 

Optionally the label chipcard further contains price 
information, 

15 These information are stored in a record in the 

nonvolatile memory of the label chipcard. 

The communication between label chipcard and check-out 
system may be accomplished by a method as laid down in 
FIG. 2. The contact label chipcard has the functionality of a 
20 normal chipcard however a label chipcard in a special thin 
embodiment is used. 

FIG 4 shows a preferred embodiment of the 
communication protocol between label chipcard and check-out 
system. Check-out system sends out radio signals 
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permanently. When a contactless label chipcard is coming in 
the range of the radio field an ATR will be automatically 
generated and sent via the antenna to the contactless reader 
of the check-out system. The contactless reader receives the 
5 ATR and in the case the ATR is recognized a RequestState 
will be sent to the label chipcards. 

When the article is already paid the label chipcard sends a 
ResponseState = PAID to the contactless reader of the 
10 check-out system. The label ID will be ignored and not 
considered in generating an invoice. 

When the article is not paid the label chipcard sends a 
ResponseState=UNPAID to the contactless reader of the 
check-out system. The check-out system automatically returns 

15 a RequestProductInf o to the label chipcard. The label 

chipcard sends a ResponseProductID to the contactless reader 
and the Product ID will be stored for generating an invoice. 
An authentication protocol for authenticating the check-out 
system is executed when the Request SetPaid is initiated. 

20 The authentication protocol may be executed by symmetric or 
asymmetric algorithm (e.g. DES, RSA) . When the check-out 
system is authenticated, e.g. the label chipcard has 
generated a digital signature which is identical with the 
digital signature added to the Request SetPaid, then the 

25 article status can be updated by a RequestSetPaid. 

The article status is laid down in a record of a file 
in non volatile memory of the label chipcard. 
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For example the article status = UNPAID is defined by 
a specific bit sample. By the ''RequestSetPaid" that bit 
sample will be overwritten by a new bit sample with the 
status - PAID, Normally the article status is initialized by 
5 the manufacturer or packaging company. The communication 

between label chipcard and contactless reader is preferably 
performed by means of APDU's. 

FIG 5 shows a preferred method for contactless payment 
according to the present invention. 



10 The inventive method starts with the step of 

examination of the presence of a contactless chipcard in the 
RF field- Not identified chipcards will be ignored. For 
recognized chipcards the method will determine the article 
status PAID or UNPAID. If the article status is UNPAID, the 

15 following steps will be performed by the inventive method: 



1. The check-out system sends a request to the selected 
label chipcard for providing product information 

2. The product information is stored in memory of 
check-out system 

20 3. Step 1 and 2 will be repeated for all identifiable 
label chipcards 

4o If all label chipcards recognized, generating an 

invoice (e.g. look up price in enterprise data or use 
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price stored in the label chipcard) based on 
information received from said label chipcards . 



5. Preferably the check-out system is displaying the 
generated invoice at the display and is offering 

5 different payment possibilities as options. Preferably 

the check-out system offers a graphical user interface 
for selecting payment possibilities. 

6. The inventive method examines the validity of the 
selected and performed payment. 

10 7, If the payment has been successful e.g. the payment 
was valid the method selects a label chipcard 
identified in generated invoice. 

8. An authentication protocol for the selected label 
chipcard is executed. The authentication may be 

15 executed by a symmetric or asymmetric algorithm. In a 

preferred embodiment the check-out system generates 
with support of the key A which is identical with key 
B of the label chipchard and '"RequestSetPaid" a MAC or 
digital signature . 

20 

9. The check-out systems sends a '^RequestSetPaid" with a 
MAC or digital signature to the selected label 
chipcard. 

10. The label chipcard will overwrite the record with the 
25 updated payment status information only if the MAC or 
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digital signature provided with that request is 
identical with the MAC or digital signature generated 
by the label chipcard with support of key B. 

11. Steps 8-11 will be repeated for all articles or 
5 products identified by the invoice. 

12. When all steps are completed or fulfilled the theft 
alarm system or system for preventing theft will be 
deactivated. 

Avoiding that unpaid articles can leave the 
10 supermarket or department store without warning signal the 
^'RequestSetPaid" can only be performed when the validity of 
payment is confirmed. For example^ a cashier confirms the 
payment by pressing a confirmation button. However the 
confirmation of payment can be made in every other possible 
15 way. 

Another embodiment of the inventive method deals with 
the possibility that the customer can select between 
different payment methods^ e.g. noncash payments by means of 
credit card or electronic purse. 

20 Before the RequestSetPaid can be performed a 

confirmation step that the noncash payment has been valid 
must be implemented. 

The payment can be performed by means of contact cards 
like magnetic stripe cards or chipcards, contactless payment 
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card;, e.g. issued by the store^ or cash payment ^-9- 
automated cashier system. 

There are several advantages of the present invention 
compared with prior art systems. This invention allows 
5 buying articles without recording them manually by the 

cashier. This is more convenient for the customer as well 
the cashier. Furthermore, the customer does not have to 
unpack his cart and put all articles from the cart onto belt 
and back in his cart after the articles are scanned. Due to 
10 the faster processing, less cashier systems and less 

personnel are necessary. In the case the customer scans the 
articles himself, the invention will be used to check the 
accuracy of the list scanned by the customer. 
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